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AMENDMENTS TO THE CLAIMS: 

Applicant proposes to amend claims 1, 2, 7-9, 14-17, 22, 27, 32, and 37 as 
indicated in the following listing of claims, which replaces all prior versions and listings 
of claims in the application: 

1 . (Currently Amended) A method for communicating between a first private 

network and a second private network configured from nodes in a public network, 
comprising: 

receiving a packet from a source node in the first private network; 
determining whether the packet is destined for the second private network; 

r%tr%r\ 
crrTCr 

obtaining an address mapping corresponding to a destination node in the 
second private network and acguiring a channel key associated 
with a channel based on the determination, wherein the channel 
comprises a plurality of virtual links through the public network that 
connects a plurality of channel nodes, the channel nodes including 
the source node and the destination node, such that only the 
channel nodes are permitted to communicate over the channel, and 
wherein the channel key is updated for a modification of the 
channel nodes; and 

forwarding the packet over a -the channel to a -the destination node-ifnthe- 
s e cond pr i vat e n e twork bas e d on th e d e t e rm i nat i on, wh e r ei n th e 
chann el compr i s e s a p l ura li ty of v i rtua l li nks through th e pub l ic 
n e twork that conn e cts a p l ura li ty of chann el nod e s, th e chann e l 
nod e s i nclud i ng th e sourc e nod e and th e d e st i nat i on nod e , such 
that on l y th e chann el nod e s can commun i cat e ov e r th e chann el. 
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(Currently Amended) The method of claim 1, said forwarding comprising: 

obta i ning an addr e ss mapp i ng corr e spond i ng to th e d e st i nat i on nod e 
bas e d on th e d e t e rmination; and 

sending the packet to the destination node using the address mapping, 
the address mapping reflecting a relationship between an internal 
address for the destination node for use in communicating among 
nodes in the second private network and an external address for 
the destination node suitable for communicating over the public 
network. 



(Previously Presented) The method of claim 2, said sending further comprising, 
adding the external address to the packet. 

(Previously Presented) The method of claim 2, said sending further comprising, 
encrypting the packet. 

(Previously Presented) The method of claim 2, said obtaining comprising, 

accessing the address mapping based on a determination that the packet 
is destined for the second private network. 
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6. (Previously Presented) The method of claim 1 , said determining comprising, 

determining whether an address mapping exists for a destination address 
in the packet. 

7. (Currently Amended) A method for communicating between a first private 
network and a second private network configured from nodes in a public network, 
comprising: 

receiving a packet from a source node in the first private network; 

determining whether the packet is destined for the second private network; 

obtaining an address mapping corresponding to a destination node in the 
second private network and acquiring a channel key associated 
with a channel based on the determination , wherein the channel 
comprises a plurality of virtual links through the public network that 
connects a plurality of channel nodes, the channel nodes including 
the source node and the destination node, such that only the 
channel nodes are permitted to communicate over the channel, and 
wherein the channel key is updated for a modification of the 
channel nodes : and 

sending the packet over [[a]] the channel to the destination node using the 
address mapping, the address mapping reflecting a relationship 
between an internal address for the destination node for use in 
communicating among nodes in the second private network and an 
external address for the destination node suitable for 
communicating over the public network , wh e r ei n th e chann el 
compr i s e s a p l ura li ty of v i rtua l li nks through th e pub li c n e twork that 
conn e cts a p l urality of chann el nod e s, th e chann el nod e s i nc l ud i ng 
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th e sourc e nod e and tho dost i nation nod e , ouch that only tho 
chann el nod e s can commun i cat e ov e r th e chann el. 

(Currently Amended) A method for communicating between a first private 
network and a second private network that uses a public network infrastructure, 
comprising: 

receiving a packet from a source node in the second private network; 
determining whether the packet is destined for the second private network; 

crrrcr 

obtaining an address mapping corresponding to a router node in the first 
private network and acguiring a channel key associated with a 
channel based on the determination, wherein the channel 
comprises a plurality of virtual links through the public network that 
connects a plurality of channel nodes, the channel nodes including 
the source node and the router node, such that only the channel 
nodes are permitted to communicate over the channel, and wherein 
the channel key is updated for a modification of the channel nodes; 
and 

forwarding the packet over [[a]] the channel to a destination node in the 
first private network bas e d on th e d e t e rm i nation, wh e r ei n th e 
chann el compris e s a p l ura li ty of v i rtua l li nks through th e pub li c 
n e twork that conn e cts a p l ural i ty of chann el nod e s, th e chann el 
nod e s i nc l ud i ng th e sourc e nod e and th e d e st i nat i on nod e , such 
that on l y th e chann el nod e s can communicat e ov e r th e chann e l . 
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9. (Currently Amended) The method of claim 8, said forwarding comprising: 

obtain i ng an address mapp i ng corr e sponding to a rout e r nod e basod on 
th e d e t e rm i nat i on; 

sending the packet to the router node using the address mapping, wherein 
the router node forwards the packet to the destination node based 
on an internal address in the packet for the destination node 
suitable for communicating among nodes in the first private 
network. 

10. (Previously Presented) The method of claim 9, said sending further comprising, 

adding, to the packet, an external address for the router node suitable for 
communicating over the public infrastructure. 

1 1 . (Previously Presented) The method of claim 9, said sending further comprising, 

encrypting the packet. 

12. (Previously Presented) The method of claim 9, said obtaining comprising, 

accessing the address mapping based on a determination that the packet 
is not destined for the second private network. 

13. (Previously Presented) The method of claim 8, said determining comprising, 

determining whether an address mapping exists for a destination address 
in the packet. 
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(Currently Amended) A method for communicating between a first private 
network and a second private network that uses a public network infrastructure, 
comprising: 

receiving a packet from a source node in the second private network; 

determining whether the packet is destined for the second private network; 

obtaining an address mapping corresponding to a router node and 

acquiring a channel key associated with a channel based on the 
determination[[:1 l wherein the channel comprises a plurality of 
virtual links through the public network that connects a plurality of 
channel nodes, the channel nodes including the source node and 
the router node, such that only the channel nodes are permitted to 
communicate over the channel and wherein the channel key is 
updated for a modification of the channel nodes: and 

sending the packet over [[a]] the channel to the router node using the 

address mapping, wherein the router node forwards the packet to a 
destination node in the first private network based on an internal 
address in the packet for the destination node suitable for 
communicating among nodes in the first private network , wh e r ei n 
th e chann el compr i s e s a p l ura li ty of v i rtua l l i nks through th e pub li c 
n e twork i nfrastructur e that conn e cts a plura li ty of chann el nod e s, 
th e chann el nod e s i nc l ud i ng th e rout e r nod e and th e sourc e nod e , 
such that on l y th e chann e l nod e s can commun i cat e ov e r th e 
ch a nn el. 
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(Currently Amended) An apparatus for communicating between a first private 
network and a second private network that uses a public network infrastructure, 
comprising: 

a memory having program instructions; and 

a processor responsive to the program instructions to: 

receive a packet from a source node in the first private 
network, 

determine whether the packet is destined for the second 
private network, ar^ 

acquire a channel key associated with a channel based on 
the determination, wherein the channel comprises a 
plurality of virtual links through the public network that 
connects a plurality of channel nodes, the channel 
nodes including the source node and a destination 
node in the second private network, such that only the 
channel nodes are permitted to communicate over the 
channel, and wherein the channel key is updated for a 
modification of the channel nodes, and 

forward the packet over [[a]] the channel to a- the destination 
node i n th e s e cond pr i vat e n e twork bas e d on th e 
d e t e rm i nat i on, wh e r ei n th e chann el compr i s e s a 
p l ura l ity of virtu al li nks through th e pub li c n e twork 
infrastructur e th a t conn e cts a p l ura li ty of chann el 
nod e s, th e chann el nod e s i nclud i ng th e sourc e nod e 
and th e d e st i nat i on nod e , such that on l y th e chann el 
nod e s can commun i cat e ov e r th e chann el. 
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(Currently Annended) An apparatus for communicating between a first private 
network and a second private network that uses a public network infrastructure, 
comprising: 

a memory having program instructions; and 

a processor responsive to the program instructions to: 

receive a packet from a source node in the second private 
network, 

determine whether the packet is destined for the second 
private network, and 

acquire a channel key associated with a channel based on 
the determination, wherein the channel comprises a 
plurality of virtual links through the public network that 
connects a plurality of channel nodes, the channel 
nodes including the source node and a destination 
node in the first private network, such that only the 
channel nodes are permitted to communicate over the 
channel and wherein the channel key is updated for a 
modification of the channel nodes, and 

forward the packet over [[a]] the channel to a-the destination 
node i n th e f i rst pr i vat e n e twork bas e d on th e 
d e t e rm i nat i on, wh e r ei n th e chann el compr i s e s a 
plura li ty of virtua l links through th e pub li c n e twork 
infrastructur e that conn e cts a p l ural i ty of channel 
nod e s, th e chann el nod e s i nc l uding th e sourc e nod e 
and th e d e st i nat i on nod e , such that on l y th e chann el 
nod e s can commun i cat e ov e r th e ch a nn el. 
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(Currently Amended) A computer-readable medium containing instructions for 
performing a method for communicating between a first private network and a 
second private network that uses a public network infrastructure, the method 
comprising: 

receiving a packet from a source node in the first private network; 

determining whether the packet is destined for the second private network; 

obtaining an address mapping corresponding to a destination node in the 
second private network and acquiring a channel key associated 
with a channel based on the determination , wherein the channel 
comprises a plurality of virtual links through the public network that 
connects a plurality of channel nodes, the channel nodes including 
the source node and the destination node, such that only the 
channel nodes are permitted to communicate over the channel and 
wherein the channel key is updated for a modification of the 
channel nodes ; and 

sending the packet over [[a]] the channel to the destination node using the 
address mapping, the address mapping reflecting a relationship 
between an internal address for the destination node for use in 
communicating among nodes in the second private network and an 
external address for the destination node suitable for 
communicating over the public infrastructure , wh e r ei n th e chann el 
compr i s e s a p l ura li ty of virtua l li nks through th e pub li c n e twork 
i nfrastructur e that conn e cts a p l urality of chann el nod e s, th e 
chann el nod e s i nc l ud i ng th e sourc e nod e and th e d e st i nat i on nod e , 
such th a t on l y th e chann el nod e s can communicat e ov e r th e 
chann e l . 
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18. (Previously Presented) The computer-readable medium of claim 17, said 
sending further comprising, 

adding the external address to the packet. 



19. (Previously Presented) The computer-readable medium of claim 17, said 
sending further comprising, 

encrypting the packet. 



20. (Previously Presented) The computer-readable medium of claim 17, said 
obtaining comprising, 

accessing the address mapping based on a determination that the packet 
is destined for the second private network. 



21. (Previously Presented) The computer-readable medium of claim 17, said 
determining comprising, 

determining whether an address mapping exists for a destination address 
in the packet. 
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(Currently Amended) A computer-readable medium containing instructions for 
performing a method for communicating between a first private network and a 
second private network that uses a public network infrastructure, the method 
comprising: 

receiving a packet from a source node in the second private network; 

determining whether the packet is destined for the second private network; 

obtaining an address mapping corresponding to a router node and 

acquiring a channel key associated with a channel based on the 
determination, wherein the channel comprises a plurality of virtual 
links through the public network that connects a plurality of channel 
nodes, the channel nodes including the source node and the router 
node, such that only the channel nodes are permitted to 
communicate over the channel and wherein the channel key is 
updated for a modification of the channel nodes ; and 

sending the packet over [[a]] the channel to the router node using the 

address mapping, wherein the router node fonA^ards the packet to a 
destination node in the first private network based on an internal 
address in the packet for the destination node suitable for 
communicating among nodes in the first private network ; and 

wh e r ei n th e channe l compris e s a p l ura li ty of v i rtual li nks 
through th e pub li c n e twork i nfrastructur e that 
conn e cts a p l ural i ty of chann el nod e s, th e chann el 
nod e s i nc l ud i ng th e rout e r nod e and th e d e st i nat i on 
nod e , such that on l y the chann el nod e s can 
commun i cat e ov e r th e chann e l . 
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23. (Previously Presented) The computer-readable medium of claim 22, said 
sending further comprising, 

adding, to the packet, an external address for the router node suitable for 
communicating over the public infrastructure. 

24. (Previously Presented) The computer-readable medium of claim 22, said 
sending further comprising, 

encrypting the packet. 

25. (Previously Presented) The computer-readable medium of claim 22, said 
obtaining comprising, 

accessing the address mapping based on a determination that the packet 
is not destined for the second private network. 

26. (Previously Presented) The computer-readable medium of claim 22, said 
determining comprising, 

determining whether an address mapping exists for a destination address 
in the packet. 
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27. (Currently Amended) An apparatus for communicating between a first private 
network and a second private network configured from nodes in a public network 
infrastructure, comprising: 

means for receiving a packet from a source node in the first private 
network; 

means for determining whether the packet is destined for the second 
private network; 

means for obtaining an address mapping corresponding to a destination 
node in the second private network and acquiring a channel key 
associated with a channel based on the determination; and 

means for sending the packet over a -the channel to the destination node 
using the address mapping, the address mapping reflecting a 
relationship between an internal address for the destination node 
for use in communicating among nodes in the second private 
network and an external address for the destination node suitable 
for communicating over the public infrastructure , wh e r ei n th e 
chann el compris e s a p l ura li ty of v i rtua l li nks through th e pub li c 
n e twork i nfrastructur e that conn e cts a p l ura li ty of chann el nod e s, 
th e chann el nod e s i nc l ud i ng th e sourc e nod e and th e d e st i nat i on 
nod e , such that on l y th e chann el nod e s can communicat e ov e r th e 
chann el. 

28. (Previously Presented) The apparatus of claim 27, said means for sending 
further comprising, 

means for adding the external address to the packet. 
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(Previously Presented) The apparatus of claim 27, said means for sending 
further comprising, 

means for encrypting the packet. 

(Previously Presented) The apparatus of claim 27, said means for obtaining 
comprising, 

means for accessing the address mapping based on a determination that 
the packet is destined for the second private network. 

(Previously Presented) The apparatus of claim 27, said means for determining 
comprising, 

means for determining whether an address mapping exists for a 
destination address in the packet. 
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32. (Currently Amended) An apparatus for communicating between a first private 
network and a second private network configured from nodes in a public network 
infrastructure, comprising: 

means for receiving a packet from a source node in the second private 
network; 

means for determining whether the packet is destined for the second 
private network; 

means for obtaining an address mapping corresponding to a router node 
and acquiring a channel kev associated with a channel based on 
the determination; 

means for sending the packet over the channel to the router node using 
the address mapping, wherein the router node forwards the packet 
to a destination node in the first private network based on an 
internal address in the packet for the destination node suitable for 
communicating among nodes in the first private networkrnaft^ 

wh e r ei n th e chann el compr i s e s a p l ura li ty of v i rtua l li nks 
through tho pub li c n e twork infrastructur e that 
conn e cts a p l ura li ty of chann el nod e s, th e chann el 
nod e s i nclud i ng th e rout e r nod e and th e d e st i nat i on 
nod e , such that on l y th e chann el nod e s c a n 
commun i cat e ov e r th e chann el. 
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33. (Previously Presented) The apparatus of claim 32, said means for sending 
further comprising, 

means for adding, to the packet, an external address for the router node 
suitable for communicating over the public infrastructure. 

34. (Previously Presented) The apparatus of claim 32, said means for sending 
further comprising, 

means for encrypting the packet. 

35. (Previously Presented) The apparatus of claim 32, said means for obtaining 
comprising, 

means for accessing the address mapping based on a determination that 
the packet is not destined for the second private network. 

36. (Previously Presented) The apparatus of claim 32, said means for determining 
comprising, 

means for determining whether an address mapping exists for a 
destination address in the packet. 
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(Currently Amended) A method for communicating between a first private 
network and a second private network configured from nodes in a public network, 
comprising: 

receiving, at a router node, a first packet from a source node in the first 
private network, wherein the router node facilitates connection 
between the first private network and the second private network; 

determining whether the first packet is destined for the second private 
network; 

obtaining an address mapping corresponding to a second destination 

node in the second private network bas e d on th e d e t e rm i nat i on and 
acquiring a channel key associated with a channel based on the 
determination, wherein the channel comprises a plurality of virtual 
links through the public network that connects a plurality of channel 
nodes, the channel nodes including the source node and the router 
node, such that only the channel nodes are permitted to 
communicate over the channel and wherein the channel key is 
updated for a modification of the channel nodes ; 

sending the packet over [[a]] the channel to the second destination node 
using the address mapping, the address mapping reflecting a 
relationship between an internal address for the second destination 
node for use in communicating among nodes in the second private 
network and an external address for the second destination node 
suitable for communicating over the public infrastructure , wh e r ei n 
th e chann e l compr i s e s a p l ura li ty of v i rtua l l i nks through th e pub li c 
n e twork that conn e cts a p l ur ali ty of chann el nod e s, th e chann e l 
nod e s i nc l ud i ng a f i rst d e st i nat i on nod e in th e f i rst privat e n e twork 
and th e rout e r nod e and th e s e cond d e st i nat i on nod e , such that 
on l y th e chann el nod e s can communicat e ov e r th e chann el; 
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receiving a second packet from a source node in the second private 
network; 

determining whether the second packet is destined for the second private 
network; 

obtaining an address mapping corresponding to the router node based on 
the determination that the second packet is not destined for the 
second private network; and 

sending the packet over the channel to the router node using the address 
mapping corresponding to the router node, wherein the router node 
forwards the packet to the-a_first destination node in the first private 
network based on an internal address in the second packet for the 
first destination node suitable for communicating among nodes in 
the first private network. 
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